Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/969fcc2a-4175-3fea-a4c4-01144e528826.roa
File:                     969fcc2a-4175-3fea-a4c4-01144e528826.roa (raw, json)
Hash identifier:          ra4XCyCIjFk+9mwrbffWPfO0o3sRBfDN1F/JmZVtL88=
Subject key identifier:   78:B5:F8:E5:AF:C6:5F:B7:32:DE:70:D2:55:FB:22:47:00:7C:B5:A9
Certificate issuer:       /CN=4848cc9b-e46f-485e-b3f2-4f393b5d92d6
Certificate serial:       010D0C9F4328584E9BE51234DB8CAE21E1F72500
Authority key identifier: B6:2A:40:95:87:55:AF:8F:01:A4:40:13:3D:22:F2:15:2B:B6:8D:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/969fcc2a-4175-3fea-a4c4-01144e528826.roa
Signing time:             Fri 24 Jul 2026 21:00:12 +0000
ROA not before:           Fri 24 Jul 2026 21:00:12 +0000
ROA not after:            Thu 22 Oct 2026 21:00:12 +0000
asID:                     26042
IP address blocks:        2602:f919:100::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9b:e5:12:34:db:8c:ae:21:e1:f7:25:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4848cc9b-e46f-485e-b3f2-4f393b5d92d6
        Validity
            Not Before: Jul 24 21:00:12 2026 GMT
            Not After : Oct 22 21:00:12 2026 GMT
        Subject: CN=f6043cbe-6aeb-4be2-8ee9-0154afaaecb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:90:3a:5d:ae:cd:8c:5f:e8:de:8c:e5:c9:ef:
                    fc:fa:4b:55:32:f3:76:df:f1:a7:ee:07:12:33:bb:
                    8c:b4:77:1c:b0:8e:f0:48:72:93:08:49:78:3f:f7:
                    29:f9:1e:00:a3:bd:d1:70:7d:3f:37:db:6f:a6:5d:
                    b7:cb:d9:7e:49:40:5d:dc:d4:93:97:19:51:5d:4d:
                    ee:d2:55:d0:4b:e4:19:d6:5b:7c:3b:d6:cc:d4:08:
                    28:ce:5f:fc:be:f7:c5:34:7e:91:f8:5e:63:55:80:
                    0b:98:ad:6c:48:9b:43:8e:b9:a2:e4:3a:d2:f7:28:
                    c7:88:55:7a:bd:80:6b:9f:e2:11:20:cc:19:9a:96:
                    b9:d0:f0:7d:f4:e9:ff:6c:1c:05:f2:bd:26:fa:b7:
                    84:7c:95:71:86:8c:fb:8e:db:e4:06:29:50:03:65:
                    86:03:54:fd:c0:03:f2:16:05:fa:b8:88:4d:d8:e4:
                    85:91:60:1f:e0:d0:20:1d:14:43:a7:52:f3:b0:39:
                    83:b7:c5:7c:f5:4b:3d:3f:7c:e7:45:9c:f8:38:46:
                    cf:35:98:1a:dd:82:15:6c:a4:f8:1b:73:3f:18:86:
                    a8:42:0e:4e:86:af:eb:67:04:2e:de:aa:05:1c:d9:
                    2a:1c:42:c1:dd:46:8b:e0:7f:0b:43:e6:73:71:89:
                    9b:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:B5:F8:E5:AF:C6:5F:B7:32:DE:70:D2:55:FB:22:47:00:7C:B5:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/969fcc2a-4175-3fea-a4c4-01144e528826.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.crl

            X509v3 Authority Key Identifier:
                keyid:B6:2A:40:95:87:55:AF:8F:01:A4:40:13:3D:22:F2:15:2B:B6:8D:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f919:100::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:d0:39:b2:3a:f4:65:82:8c:74:f3:7d:4a:d2:13:46:9a:77:
         9a:4f:74:99:b9:80:ba:a9:7b:a5:29:1e:4e:2a:ef:ca:54:12:
         14:c0:a1:42:d6:c4:72:c4:34:32:d7:e6:85:43:52:24:46:53:
         59:70:95:ff:26:d1:6c:c5:ad:be:9a:19:29:32:b7:12:ca:02:
         11:bf:49:62:7f:31:08:c3:d8:1f:f1:e0:5a:7e:bb:7c:24:30:
         9b:67:5c:5c:16:63:11:4c:32:af:d9:08:58:a1:8f:d0:db:f1:
         ef:7b:56:0d:08:1b:1d:70:63:16:c0:3d:e5:70:9b:cc:c0:e9:
         13:e4:78:c6:5d:41:1d:96:61:92:b1:62:a6:5a:bb:4c:3e:a9:
         41:0b:02:2b:86:e7:81:7f:0c:aa:e9:cb:09:0d:60:17:9e:67:
         52:4e:98:9f:f0:29:aa:c4:64:ce:97:7c:fb:8d:42:ae:42:fe:
         5d:a8:b7:b5:c0:28:d3:9a:69:17:2d:91:ff:9f:37:40:dc:1f:
         4c:0c:a8:00:42:9a:c4:5a:11:76:7b:63:eb:c4:27:09:f2:53:
         40:55:87:9f:72:b1:a0:70:02:67:e2:bf:8d:b7:6c:b8:42:f6:
         de:5d:8f:ca:14:6a:c8:2b:6e:35:34:7f:0e:2f:3a:d7:9e:78:
         12:23:80:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:47:08 2026 by rpki-client